Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2xjh-34g7-vxf5

Опубликовано: 30 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to execute arbitrary code. Using specially crafted input, the user could exploit this vulnerability to execute arbitrary code on the system.

IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to execute arbitrary code. Using specially crafted input, the user could exploit this vulnerability to execute arbitrary code on the system.

EPSS

Процентиль: 70%
0.00643
Низкий

7.2 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.2
nvd
около 1 года назад

IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to execute arbitrary code. Using specially crafted input, the user could exploit this vulnerability to execute arbitrary code on the system.

CVSS3: 7.2
fstec
около 1 года назад

Уязвимость интерфейса Swagger платформы для автоматизации управления и развертывания приложений и сервисов IBM WebSphere Automation, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 70%
0.00643
Низкий

7.2 High

CVSS3

Дефекты

CWE-78